From 09ff99823e1b0d0d055e452148dd125cd818413c Mon Sep 17 00:00:00 2001 From: Jeremy Long Date: Sun, 28 Dec 2014 09:15:07 -0500 Subject: [PATCH] added information about the central analyzer Former-commit-id: a01e805f5692b0db9b6260a0385271c60116b7b9 --- src/site/markdown/central-analyzer.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 src/site/markdown/central-analyzer.md diff --git a/src/site/markdown/central-analyzer.md b/src/site/markdown/central-analyzer.md new file mode 100644 index 000000000..ec70e36a3 --- /dev/null +++ b/src/site/markdown/central-analyzer.md @@ -0,0 +1,11 @@ +Central Analyzer +============== + +Dependency-check includes an analyzer that will check for the Maven GAV +(Group/Artifact/Version) information for artifacts in the scanned area. By +default the information comes from [Maven Central][1]. If the artifact's hash +is found in the configured Nexus repository, its GAV is recorded as an Identifier +and the Group is collected as Vendor evidence, the Artifact is collected as Product +evidence, and the Version is collected as Version evidence. + +[1]: http://search.maven.org/ "Maven Central"